I should mention that this needed a feature freeze exception since we're past feature freeze, see https://wiki.ubuntu.com/FreezeExceptionProcess for next time. Given the magnitude of the security issues this fixes, I've approved it without going through the normal process.